How to Configure Oracle Enterprise Gateway API Explorer To Sign SOAP Attachments (Doc ID 1541268.1)

Last updated on OCTOBER 07, 2022

Applies to:

Goal

When using Oracle Enterprise Gateway it appears to be not possible to create the WSS signature for SOAP attachments.

In API Explorer, it is possible to follow the menu path "Security >> Sign Request", then navigate to "Advanced >> Additional" tab.  Here, there is a check box for "Sign attachments".
When testing with a request with an attachment, if an attempt is made to sign the message, there is no signature for the attachment  The rest of the message is signed as expected.

There appears to be an "XML Signature Generation" filter available through Policy Studio that seems to perform this task on the gateway side, but it appears that the filter will perform the signing for the response.

How is it possible to send signed requests to OEG for verification where all the SOAP attachments must be signed?
 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.